A synthetic node is a user-configured device in the Forward Networks model. A synthetic node represents a device or group of devices that Forward Networks cannot collect data from. Most often a synthetic node represents a private service provider network (such as a layer-3 VPN) or the public Internet itself.
You can create or edit synthetic nodes under Sources > Synthetic. Note that there is always one Internet synthetic node.
Suppose you have a connection from your network on a device called atl-internet on port ge-0/0/0, which connects to the service provider’s router. This interface has a public IP address, and you exchange BGP routes with the service provider over the link.
![](https://uploads-us-west-2.insided.com/forwardnetworks-us/attachment/b267ad8c-98b0-4853-8dd1-1b1bd4be1997.png)
To add a link to the Internet synthetic node, click on the edit button under Sources > Synthetic > internet
![](https://uploads-us-west-2.insided.com/forwardnetworks-us/attachment/c096cb55-a94a-44f5-b74c-4f60da7a49ea.png)
Under Uplink interface, type the name of the device and the physical interface (a list of available interfaces will appear after you type the device name, and you can select one).
Because you exchange BGP routes with the service provider on this link, choose From BGP routes for Subnet auto-discovery. ** Note that choosing this option will trigger the collection of BGP routes on the atl-internet device.
![](https://uploads-us-west-2.insided.com/forwardnetworks-us/attachment/826708fb-326b-4fcb-a53e-2658da287bd5.png)
Another common scenario for Internet connectivity is having the physical connection to the service provider on a switch, but the actual layer-3 gateway on another device. In this scenario, it is necessary to specify the Gateway interface for the traffic. Consider the following network:
![](https://uploads-us-west-2.insided.com/forwardnetworks-us/attachment/310ebdea-509a-43be-ae18-769d41eb2a44.png)
The physical interface that connects to the ISP is the same as before. However, this time the atl-internet device is behaving as a switch, and the public IP address is on ge0/1.107 on the atl-edge-fw-01 firewall.
The Gateway interface is the last layer-3 interface that Internet bound traffic traverses before leaving the network. It is also the interface on which BGP peering is performed with the ISP. (The traffic is simply trunked through VLAN 100 on the atl-internet switch).
The physical uplink in the synthetic node configuration is the same. But now you must enter atl-edge-fw01 gi0/1.107 as the Gateway interface.
![](https://uploads-us-west-2.insided.com/forwardnetworks-us/attachment/1263f347-7573-4eac-aeee-3bead87a5109.png)
Note that regardless of whether the Gateway interface is the same as the Uplink interface or not, that Forward Networks only shows the physical interface added to the topology. So both of the configurations above will yield the same physical topology diagram:
![](https://uploads-us-west-2.insided.com/forwardnetworks-us/attachment/a1050f42-4e30-4848-a538-9e37cef5a9b9.png)